-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
- HP Community
- Notebooks
- Notebook Boot and Lockup
- KB5025885 + Sure Start + Windows 11 Upgrade = 0xc4000028 BSO...

Create an account on the HP Community to personalize your profile and ask a question
10-02-2023 01:45 PM
We have a fleet of HP Probooks/Elitebooks running fully patched Windows 10 22H2 Enterprise with the mitigations referenced in KB5025885 employed. ANY of these devices we upgrade via Windows 11 22h2 Feature updates BSOD with error code 0Xc4000028. The only way to get them to boot is to disable secure boot in the bios. We have tried the recovery steps listed in the KB (recopying the boot manager and policy file to the EFI partition) without success. We have tried resetting the entire bios and enabling secure boot. and still the same BSOD. We suspect the culprit is HP Sure Boot key protection, however machine still doesn't boot with this disabled.
This is a huge and replicable issue that also renders HP's entire system recovery function defunct, since the recobery environment does not contain the patches. Is there any guidance from HP on how to handle this?